PC Professionell 2006 May

home *** CD-ROM | disk | FTP | other *** search

/ PC Professionell 2006 May / PCpro_2006_05.ISO / files / free_security / msshared / Shared_Computer_Toolkit_ENU.msi / FileScripts003 < prev next >

Wrap

Extensible Markup Language | 2005-09-02 | 82.7 KB | 1,139 lines

■<?xml version="1.0" ?> <package> <comment> ' *** ' *** ------------------------------------------------------------------------------ ' *** Filename: AutoDemo.wsf ' *** ------------------------------------------------------------------------------ ' *** Description: Example script that shows how to automatically build a computer ' *** using most of the toolkit tools. Can also be used to quickly ' *** build a demo computer running the Toolkit. ' *** ------------------------------------------------------------------------------ ' *** Prereqs: Windows XP SP2. WGA Validation must have been completed previously. ' *** Disk prerequisites for Windows Disk Protection must be in place. ' *** D: drive for the Teenager User Profile. ' *** ------------------------------------------------------------------------------ ' *** Version: 1.0 ' *** Notes: ' *** ------------------------------------------------------------------------------ ' *** Copyright (C) Microsoft Corporation 2005, All Rights Reserved ' *** ------------------------------------------------------------------------------ ' *** </comment> <job> <runtime> <description>AutoDemo</description> <named name="Uninstall" required="false" many="false" helpstring="Uninstall the Toolkit"/> <named name="Install" required="false" many="false" helpstring="Install the Toolkit first"/> <named name="Go" required="false" many="false" helpstring="Initiate the AutoDemo process"/> <named name="Cleanup" required="false" many="false" helpstring="Clean up the Demo"/> <named name="GS2" required="false" many="false" helpstring="Select/clear the computer settings in Getting Started"/> <usage> AutoDemo Usage Instructions --------------------------- Options: Install - If this script is placed in a folder with the Toolkit MSI, this option will install the Toolkit. Go - Start the AutoDemo process. Must be run from and provide the Toolkit admin account and password. Initiates two restarts and finishes at the logon screen. Cleanup - Remove all of the user profiles and accounts created by /Go. Initiates two restarts. GS2 - Select/clear all of the computer settings available in Step 2 of Getting Started. If used with /Go, options are selected. If used with /Cleanup, options are cleared. ASK - Ask for confirmation within each created account to allow for manual configuration. Ask to continue after each step. Uninstall - If the Toolkit has been installed, this option uninstalls it. Examples: AutoDemo.wsf /Install AutoDemo.wsf /Install /Go toolkitadmin password AutoDemo.wsf /Go toolkitadmin password AutoDemo.wsf /Go /GS2 toolkitadmin password AutoDemo.wsf /Go /ASK toolkitadmin password AutoDemo.wsf /Go /GS2 /ASK toolkitadmin password AutoDemo.wsf /Cleanup toolkitadmin password AutoDemo.wsf /Cleanup /GS2 toolkitadmin password AutoDemo.wsf /Uninstall ******************************************************************************* * Warning: It is highly recommended that you only use this script on a demo * * computer. This script will configure several accounts and perform several * * Toolkit functions and computer restarts. * *******************************************************************************</usage> </runtime> <?job error="false" debug="False" ?> <script language="VBScript"> <![CDATA[ Option Explicit On Error Resume Next ' ~~~ ' ~~~ Define localizable variables ' ~~~ Dim L_AutoDemo_TEXT, L_UsageErrAdm_TEXT, L_UsageErrCreds_TEXT, L_Install_TEXT, L_InstallSuccess_TEXT, L_InstallFail_TEXT Dim L_Uninstall_TEXT, L_UninstallSuccess_TEXT, L_UninstallFail_TEXT, L_NotCScript_TEXT, L_NoPath_TEXT Dim L_Cleanup1_TEXT, L_Cleanup1End_TEXT, L_Cleanup2_TEXT, L_Cleanup2End_TEXT, L_Cleanup3_TEXT, L_Cleanup3End_TEXT Dim L_Step1_TEXT, L_Step1End_TEXT, L_Step2_TEXT, L_Step2a_TEXT, L_Step2b_TEXT, L_Step2End_TEXT, L_Step3_TEXT, L_Step3End_TEXT, L_Step4_TEXT, L_Step4End_TEXT Dim L_WelcomeList_TEXT, L_WelcomeRemove_TEXT, L_DeleteAcct_TEXT, L_LoggingOff_TEXT, L_Restarting_TEXT, L_SleepWake_TEXT Dim L_DeleteUP_TEXT, L_AcctCreate_TEXT, L_AcctFail_TEXT, L_WDPInit_TEXT, L_WDPOn_TEXT, L_WDPSave_TEXT, L_WDPOff_TEXT, L_WDPErr_TEXT Dim L_Accessibility_TEXT, L_AutoRestart_TEXT, L_FinalPwd_TEXT, L_FinalPwdFail_TEXT, L_RunOnceMe_TEXT, L_RunOnceMeFail_TEXT Dim L_AutoLogon_TEXT, L_AutoLogonDisabled_TEXT, L_LimitAcct_TEXT, L_LimitAcctFail_TEXT, L_UPCreated_TEXT, L_UPCreateFail_TEXT Dim L_RunOnce_TEXT, L_RunOnceFail_TEXT, L_CheckWDP_TEXT, L_GS2On_TEXT, L_GS2Off_TEXT, L_ASKTitle_TEXT L_AutoDemo_TEXT = "AutoDemo" L_UsageErrAdm_TEXT = "Warning: AutoDemo must be run from a local administrative account. Cannot continue." L_UsageErrCreds_TEXT = "Error: Missing the name and/or password of the Toolkit account. Cannot continue." L_Install_TEXT = "Installing " L_InstallSuccess_TEXT = "The Shared Computer Toolkit has been successfully installed." L_InstallFail_TEXT = "The Shared Computer Toolkit could not be installed -- confirm the prerequisites are in place. Error code: " L_Uninstall_TEXT = "Uninstalling Product Code: " L_UninstallSuccess_TEXT = "The Shared Computer Toolkit has been successfully uninstalled. A restart may occur automatically if post-uninstall activities are required." L_UninstallFail_TEXT = "The Shared Computer Toolkit could not be uninstalled. Error code: " L_NotCScript_TEXT = "AutoDemo must be run with CScript, not WScript. To set CScript as the default, type: CScript //H:CScript" L_NoPath_TEXT = "AutoDemo cannot determine the path to the Toolkit. Quitting." L_Cleanup1_TEXT = "Starting the AutoDemo /Cleanup process..." L_Cleanup1End_TEXT = "Continuing to Step2 of the AutoDemo /Cleanup process..." L_Cleanup2_TEXT = "AutoDemo /Cleanup Step2..." L_Cleanup2End_TEXT = "Continuing to Step3 of the AutoDemo /Cleanup process..." L_Cleanup3_TEXT = "AutoDemo /Cleanup Step3..." L_Cleanup3End_TEXT = "AutoDemo /Cleanup is now complete." L_Step1_TEXT = "Starting the AutoDemo /Go process..." L_Step1End_TEXT = "Continuing to Step2 of the AutoDemo process..." L_Step2_TEXT = "AutoDemo Step2..." L_Step2a_TEXT = "Complete the configuration of " L_Step2b_TEXT = " and press OK to continue." L_Step2End_TEXT = "Continuing to Step3 of the AutoDemo process..." L_Step3_TEXT = "AutoDemo Step3..." L_Step3End_TEXT = "Continuing to Step4 of the AutoDemo process..." L_Step4_TEXT = "AutoDemo Step4..." L_Step4End_TEXT = "AutoDemo is almost complete. Final restart happening now." L_WelcomeList_TEXT = "Re-listed the Toolkit administrator account on the Welcome screen." L_WelcomeRemove_TEXT = "Removed the Toolkit administrator account from the Welcome screen." L_DeleteAcct_TEXT = "Deleted the user account for: " L_LoggingOff_TEXT = "Logging off." L_Restarting_TEXT = "Restarting the Computer." L_SleepWake_TEXT = "Set SleepWakePC options for the computer. Sleep @ " L_DeleteUP_TEXT = "Deleted the user profile for: " L_AcctCreate_TEXT = "Created account: " L_AcctFail_TEXT = "Could not create account: " L_WDPInit_TEXT = "Initializing Windows Disk Protection." L_WDPOn_TEXT = "Turning on Windows Disk Protection." L_WDPSave_TEXT = "Saving Changes with Windows Disk Protection." L_WDPOff_TEXT = "Turning off Windows Disk Protection." L_WDPErr_TEXT = "Error: WDP function not called with proper argument." L_Accessibility_TEXT = "Set Accessibility options for the current user." L_AutoRestart_TEXT = "Set AutoRestart for " L_FinalPwd_TEXT = "Setting final (blank) password for account " L_FinalPwdFail_TEXT = "Strong password policy in effect. Could not set final (blank) password for account " L_RunOnceMe_TEXT = "Added RunOnce for the current account to run AutoDemo " L_RunOnceMeFail_TEXT = "Could not add RunOnce for the current account to run AutoDemo " L_AutoLogon_TEXT = "Set computer to AutoLogon as " L_AutoLogonDisabled_TEXT = "AutoLogon is now disabled." L_LimitAcct_TEXT = "Limited the user account " L_LimitAcctFail_TEXT = "Could not limit the user account " L_UPCreated_TEXT = " user profile created on drive " L_UPCreateFail_TEXT = " user profile could not be created on drive " L_RunOnce_TEXT = " RunOnce added for account: " L_RunOnceFail_TEXT = " RunOnce could not be added for account: " L_CheckWDP_TEXT = "Checking Windows Disk Protection Status." L_GS2On_TEXT = "Selecting all of the Computer Options in Getting Started Step 2" L_GS2Off_TEXT = "Clearing all of the Computer Options in Getting Started Step 2" L_ASKTitle_TEXT = "Click OK to Continue" ' ~~~ Check that we are running with CScript, not WScript. If Lcase(Right(Wscript.FullName, 12)) = "\wscript.exe" Then Wscript.Echo L_NotCScript_TEXT Quit End If ' ~~~ If no arguments provided, show usage information If Wscript.Arguments.Count = 0 Then WScript.Arguments.Showusage Quit End If ' ~~~ ' ~~~ Define global variables ' ~~~ Const TOOLKITKEY = "Software\Microsoft\Shared Computer Toolkit" Const HKEY_LOCAL_MACHINE = &H80000002 Dim sAppDir, strPath, strIE, strMSI, strPCode, strTempPass, strFinalPass Dim strUser1, strUser2, strUser3 Dim strDefaultDrive, strDrive1, strDrive2, strDrive3 Dim strRestrict1, strRestrict2, strRestrict3 Dim oShell, oNetwork, oFso, oExec, oAccounts, oGroupAdmins, oGroupUsers, oWMI, oWMIReg, oInstaller Dim strUser, strPassword, strTemp1, strTemp2, strCMD, nErr ' ~~~ ' ~~~ MSI and Product Code GUID for Install and Uninstall operations ' ~~~ strMSI = "Shared_Computer_Toolkit_ENU.msi" strPCode = "{BC69E66C-47DE-412E-87DF-D1B8055A9AF7}" ' ~~~ ' ~~~ The temporary password is the initial password set on the accounts. This password meets many password complexity rules that ' ~~~ may be required in some domain environments. The password will be changed to the final password later, if it can be. ' ~~~ strTempPass = "Password!" strFinalPass = "" ' ~~~ ' ~~~ These three sample accounts are created on the computer ' ~~~ strUser1 = "Teenager" strUser2 = "Gamer" strUser3 = "Public" ' ~~~ ' ~~~ These drive letters represent where each user profile will be created. ' ~~~ strDefaultDrive = "C" strDrive1 = "D" strDrive2 = "C" strDrive3 = "C" ' ~~~ If started with the Uninstall argument, uninstall! ' ~~~ If we are performing an uninstall as part of cleanup, wait to do the uninstall later. If WScript.Arguments.Named.Exists("Uninstall") and NOT (WScript.Arguments.Named.Exists("CleanupStep2") or WScript.Arguments.Named.Exists("Cleanup")) Then UninstallSCT Quit End If ' ~~~ If started with the Install argument, initiate the install first. If WScript.Arguments.Named.Exists("Install") Then InstallSCT If WScript.Arguments.Unnamed.Count = 0 Then Quit End If ' ~~~ Ensure we have a username to continue If WScript.Arguments.Unnamed.Count < 1 Then Wscript.Echo L_UsageErrCreds_TEXT Quit Else strUser = Wscript.Arguments.Unnamed.Item(0) End If ' ~~~ Establish Shell and WMIReg objects to use below Set oShell = CreateObject("WScript.Shell") Set oWmiReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv") ' ~~~ ' ~~~ This is the location of Internet Explorer, which will be AutoRestarted for User . ' ~~~ strIE = oShell.ExpandEnvironmentStrings("%ProgramFiles%\Internet Explorer\IExplore.exe") ' ~~~ ' ~~~ This path represents where the Scripts sub-folder of the toolkit install is located. ' ~~~ oWmiReg.GetStringValue HKEY_LOCAL_MACHINE, TOOLKITKEY, "TargetDir", sAppDir If sAppDir = "" Then WScript.Echo L_NoPath_TEXT Quit End If strPath = sAppDir & "Scripts\" ' ~~~ ' ~~~ These files contains the user restrictions applied to each profile. ' ~~~ Each of these files was created by running User Restrictions. ' ~~~ strRestrict1 = sAppDir & "xml\AutoDemo.Teenager.xml" strRestrict2 = sAppDir & "xml\AutoDemo.Gamer.xml" strRestrict3 = sAppDir & "xml\AutoDemo.Public.xml" ' ~~~ Establish a couple more of our standard objects - used below Set oNetwork = CreateObject("Wscript.Network") Set oAccounts = GetObject ("WinNT://.") ' ~~~ Ensure we are running from a local admin account to continue If (oNetwork.ComputerName <> oNetwork.UserDomain) Then Wscript.Echo L_UsageErrAdm_TEXT Quit End If If WScript.Arguments.Unnamed.Count > 1 Then strPassword = Wscript.Arguments.Unnamed.Item(1) Else strPassword = "" End If If WScript.Arguments.Named.Exists("Cleanup") Then Wscript.Echo L_Cleanup1_TEXT WScript.Echo "" ' ~~~ Get ready to AutoLogon and continue when this step is done AutoLogon strUser, strPassword ' ~~~ If doing a uninstall after the cleanup, pass the argument on If WScript.Arguments.Named.Exists("Uninstall") Then AutoRunOnceMe "/CleanupStep2 /Uninstall" Else AutoRunOnceMe "/CleanupStep2" End If WScript.Echo "" ' ~~~ Clean up user profiles DeleteUserProfile strUser1 DeleteUserProfile strUser2 DeleteUserProfile strUser3 WScript.Echo "" ' ~~~ Clean up user accounts DeleteUser strUser1 DeleteUser strUser2 DeleteUser strUser3 WScript.Echo "" ' ~~~ Turn off Getting Started Step 2 checkboxes If WScript.Arguments.Named.Exists("GS2") Then HKLM False ' ~~~ Commit Changes with Windows Disk Protection WDP "Save" ' ~~~ Restart the computer and return to the next step below If WScript.Arguments.Named.Exists("ASK") Then MsgBox L_Cleanup1End_TEXT, vbInformation, L_ASKTitle_TEXT Restart L_Cleanup1End_TEXT Quit End If If WScript.Arguments.Named.Exists("CleanupStep2") Then ' ~~~ If we are coming into this step and WDP is already off, then it means it is the second time here (i.e. CleanupStep3). ' ~~~ Check WDP Status WScript.Echo L_CheckWDP_TEXT WScript.Echo "" ' Run WDP.cmd as tool #5 Call oShell.Run(Chr(34) & sAppDir & "bin\WDP.CMD" & Chr(34) & " 5", 0, True) Set oFso = CreateObject("Scripting.FileSystemObject") If oFso.GetFile(oShell.ExpandEnvironmentStrings("%WinDir%\system32\Enabled5.wdp")).size <> 0 Then ' ~~~ Windows Disk Protection is on, so turn it off Wscript.Echo L_Cleanup2_TEXT WScript.Echo "" ' ~~~ Turn off Windows Disk Protection WDP "Off" If WScript.Arguments.Named.Exists("ASK") Then MsgBox L_Cleanup2End_TEXT, vbInformation, L_ASKTitle_TEXT Restart L_Cleanup2End_TEXT WScript.Sleep 5000 ' ~~~ Note that we don't have to set RunOnce again, because turning off Windows Disk Protection will cause the computer to ' ~~~ roll back to when disk changes were last saved (when RunOnce was configured to occur). Else ' ~~~ Windows Disk Protection is off, so finish AutoDemo Wscript.Echo L_Cleanup3_TEXT WScript.Echo "" AutoLogonDisable ' ~~~ If uninstall argument also provided, uninstall the Toolkit now If WScript.Arguments.Named.Exists("UnInstall") Then UninstallSCT End If WScript.Echo L_Cleanup3End_TEXT MsgBox L_Cleanup3End_TEXT, vbInformation, L_AutoDemo_TEXT End If ' ~~~ Delete the temporary files created by WDP.cmd oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Temp5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Enabled5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Overlay5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Undo5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Commit5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Retain5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Enable5.wdp") oFso.DeleteFile(oshell.ExpandEnvironmentStrings("%WinDir%") & "\system32\Disable5.wdp") Quit End If ' ~~~ Establish the rest of our standard objects - as required by /Go and /StepX ' ~~~ These WMI and Group objects are not required by the Install and Cleanup steps above Set oWMI = GetObject ("winmgmts:\\.\root\cimv2") Set oGroupAdmins = GetObject ("WinNT://./" & GetGroupName("S-1-5-32-544") & ",group") Set oGroupUsers = GetObject ("WinNT://./" & GetGroupName("S-1-5-32-545") & ",group") If WScript.Arguments.Named.Exists("Go") Then Wscript.Echo L_Step1_TEXT WScript.Echo "" If WScript.Arguments.Named.Exists("GS2") Then HKLM True ' ~~~ First let's create all of our users as admin AddUser strUser1, strTempPass AddUser strUser2, strTempPass AddUser strUser3, strTempPass WScript.Echo "" ' ~~~ Now let's create all of the profiles CreateUserProfile strUser1, strTempPass, strDrive1 CreateUserProfile strUser2, strTempPass, strDrive2 CreateUserProfile strUser3, strTempPass, strDrive3 WScript.Echo "" ' ~~~ Then let's Set up the RunOnce details for each profile so they run this script at the next step AutoRunOnce "/Step2", strUser1 AutoRunOnce "/Step2", strUser2 AutoRunOnce "/Step2", strUser3 WScript.Echo "" AutoRunOnceMe "/Step3" WScript.Echo "" ' ~~~ Then let's Set this computer to autologon as the first account AutoLogon strUser1, strTempPass If WScript.Arguments.Named.Exists("ASK") Then MsgBox L_Step1End_TEXT, vbInformation, L_ASKTitle_TEXT Logoff Wscript.Echo L_Step1End_TEXT WScript.Sleep 5000 Quit End If If Wscript.Arguments.Named.Exists("Step2") Then Wscript.Echo L_Step2_TEXT WScript.Echo "" ' ~~~ Now set the computer to autologon as the next account, and finally as the Toolkit admin Select Case oNetwork.UserName Case strUser1 AutoLogon strUser2, strTempPass If WScript.Arguments.Named.Exists("ASK") Then WScript.Echo L_Step2End_TEXT & strUser1 MsgBox L_Step2a_TEXT & strUser1 & L_Step2b_TEXT, vbInformation, L_ASKTitle_TEXT End If Case strUser2 AutoLogon strUser3, strTempPass If WScript.Arguments.Named.Exists("ASK") Then WScript.Echo L_Step2End_TEXT & strUser2 MsgBox L_Step2a_TEXT & strUser2 & L_Step2b_TEXT, vbInformation, L_ASKTitle_TEXT End If Case strUser3 AutoLogon strUser, strPassword ' ~~~ Set up strUser3 (Public) with Accessibility options Accessibility "/LargePointer" If WScript.Arguments.Named.Exists("ASK") Then WScript.Echo L_Step2a_TEXT & strUser3 MsgBox L_Step2a_TEXT & strUser3 & L_Step2b_TEXT, vbInformation, L_ASKTitle_TEXT End If Wscript.Echo L_Step2End_TEXT End Select Logoff WScript.Sleep 5000 Quit End If If Wscript.Arguments.Named.Exists("Step3") Then Wscript.Echo L_Step3_TEXT WScript.Echo "" ' ~~~ Now let's take care of business as the Toolkit administrator again. ' ~~~ First, ensure that the process continues after the restart below. AutoRunOnceMe("/Step4") ' ~~~ Now convert the users to limited users MakeLimitedUser strUser1 MakeLimitedUser strUser2 MakeLimitedUser strUser3 WScript.Echo "" ' ~~~ Now set their final passwords (if the computer allows this due to password policy) SetFinalPassword strUser1, strFinalPass SetFinalPassword strUser2, strFinalPass SetFinalPassword strUser3, strFinalPass WScript.Echo "" ' ~~~ Run DiskProtect without command-line parameters to initialize WDP "Init" If WScript.Arguments.Named.Exists("ASK") Then MsgBox L_Step3End_TEXT, vbInformation, L_ASKTitle_TEXT ' ~~~ Let's Restart the computer so we can come back and do Disk Protection Restart L_Step3End_TEXT WScript.Sleep 5000 Quit End If If Wscript.Arguments.Named.Exists("Step4") Then Wscript.Echo L_Step4_TEXT WScript.Echo "" ' ~~~ This is the last step... so turn off AutoLogon AutoLogonDisable ' ~~~ Set up strUser2 (Gamer) to AutoRestart IE AutoRestart strUser2, strIE ' ~~~ Now let's restrict each of the accounts RestrictUser strUser1, strRestrict1 RestrictUser strUser2, strRestrict2 RestrictUser strUser3, strRestrict3 WScript.Echo "" ' ~~~ And Turn on Windows Disk Protection WDP "On" ' ~~~ And Configure the computer to automatically Sleep, then Wake for WDP critical updates - but only if interactive since SleepWake requires manual steps If WScript.Arguments.Named.Exists("ASK") Then SleepWake "18:30" If WScript.Arguments.Named.Exists("ASK") Then MsgBox L_Step4End_TEXT, vbInformation, L_ASKTitle_TEXT ' ~~~ Finally, let's restart the computer to make WDP take effect Restart L_Step4End_TEXT WScript.Sleep 5000 Quit End If ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: InstallSCT() ' *** -------------------------------------------------------------------------------- ' *** Purpose: Install the Toolkit if AutoDemo is in the same directory ' *** as the MSI. ' *** -------------------------------------------------------------------------------- ' *** Sub InstallSCT() On Error Resume Next Wscript.Echo L_Install_TEXT & strMSI WScript.Echo "" Set oInstaller = CreateObject("WindowsInstaller.Installer") oInstaller.UILevel = 4 oInstaller.InstallProduct strMSI, "ACTION=INSTALL" nErr = oInstaller.ProductState(strPCode) Set oInstaller = Nothing If nErr = 5 Then WScript.Echo L_InstallSuccess_TEXT WScript.Echo "" Else Wscript.Echo L_InstallFail_TEXT & nErr Quit End If End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: UninstallSCT() ' *** -------------------------------------------------------------------------------- ' *** Purpose: Uninstall the Toolkit. ' *** -------------------------------------------------------------------------------- ' *** Sub UninstallSCT() On Error Resume Next Wscript.Echo L_Uninstall_TEXT & strPCode WScript.Echo "" Set oInstaller = CreateObject("WindowsInstaller.Installer") oInstaller.UILevel = 3 oInstaller.ConfigureProduct strPCode, 0, 2 nErr = oInstaller.ProductState(strPCode) Set oInstaller = Nothing If nErr = -1 Then WScript.Echo L_UninstallSuccess_TEXT Else Wscript.Echo L_UninstallFail_TEXT & nErr End If End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: AddUser(strNewUser, strNewPassword) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Add a local user account, set the initial password, and add ' *** it to the administrators group. ' *** -------------------------------------------------------------------------------- ' *** Function AddUser(strNewUser, strNewPassword) ' ~~~ We need to catch errors in this routine On Error Resume Next Dim oUser AddUser = True ' ~~~ Create the User Set oUser = oAccounts.Create("User", strNewUser) If Err.Number <> 0 Then AddUser = False oUser.SetPassword strNewPassword oUser.SetInfo If Err.Number <> 0 Then AddUser = False ' ~~~ Add them to the Administrators group oGroupAdmins.Add "WinNT://" & oNetwork.ComputerName & "/" & strNewUser If Err.Number <> 0 Then AddUser = False If AddUser Then Wscript.Echo L_AcctCreate_TEXT & strNewUser Else Wscript.Echo L_AcctFail_TEXT & strNewUser WScript.Sleep 5000 End If Set oUser = Nothing End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: CheckDrive(strLoc) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Check that the drive is ready and the right type for a profile ' *** -------------------------------------------------------------------------------- ' *** Function CheckDrive(strLoc) CheckDrive = False Dim dDrive, oFso Set oFso = CreateObject("Scripting.FileSystemObject") ' ~~~ We need to catch errors in this routine On Error Resume Next Set dDrive = oFso.GetDrive(strLoc) If Err.number <> 0 Then Exit Function If dDrive.IsReady and dDrive.DriveType = 2 Then CheckDrive = True Set dDrive = Nothing Set oFso = Nothing End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: CreateUserProfile(strNewUser, strNewPassword, strLoc) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Create the initial user profile for a new local account ' *** -------------------------------------------------------------------------------- ' *** Function CreateUserProfile(strNewUser, strNewPassword, strLoc) CreateUserProfile = False strCMD = "" strCMD = Chr(34) & strPath & "ProfileMgr.wsf" & Chr(34) & " /Create " & strNewUser & " " & strNewPassword & " /Drive:" & strLoc If strLoc <> strDefaultDrive Then If NOT CheckDrive(strLoc) Then strCMD = Chr(34) & strPath & "ProfileMgr.wsf" & Chr(34) & " /Create " & strNewUser & " " & strNewPassword End If End If WScript.Echo strCMD WSCript.Echo "" ' ~~~ We need to catch errors in this routine On Error Resume Next oShell.Run strCMD, 7, True If Err.Number = 0 Then CreateUserProfile = True If CreateUserProfile Then Wscript.Echo strNewUser & L_UPCreated_TEXT & strLoc Else Wscript.Echo strNewUser & L_UPCreateFail_TEXT & strLoc End If WSCript.Echo "" End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: AutoRunOnce(strStep, strUserMod) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Ensure AutoDemo is started again from each account ' *** -------------------------------------------------------------------------------- ' *** Function AutoRunOnce(strStep, strUserMod) ' ~~~ We need to catch errors in this routine On Error Resume Next AutoRunOnce = False strCMD = "" If WScript.Arguments.Named.Exists("ASK") Then strCMD = Chr(34) & strPath & "AutoRunOnce.wsf" & Chr(34) & " /Add:SCTKey " & Chr(34) & strPath & "AutoDemo.wsf" & Chr(34) & " /args:" & Chr(34) & "/ASK " & strStep & " " & strUser & " " & strPassword & Chr(34) & " /user:" & strUserMod Else strCMD = Chr(34) & strPath & "AutoRunOnce.wsf" & Chr(34) & " /Add:SCTKey " & Chr(34) & strPath & "AutoDemo.wsf" & Chr(34) & " /args:" & Chr(34) & strStep & " " & strUser & " " & strPassword & Chr(34) & " /user:" & strUserMod End If WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True If Err.Number = 0 Then AutoRunOnce = True If AutoRunOnce Then Wscript.Echo L_AutoDemo_TEXT & strStep & L_RunOnce_TEXT & strUserMod Else Wscript.Echo L_AutoDemo_TEXT & strStep & L_RunOnceFail_TEXT & strUserMod WScript.Sleep 5000 End If WSCript.Echo "" End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: AutoRunOnceMe(strStep) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Ensure AutoDemo is started again from this account ' *** -------------------------------------------------------------------------------- ' *** Function AutoRunOnceMe(strStep) ' ~~~ We need to catch errors in this routine On Error Resume Next AutoRunOnceMe = False strCMD = "" If WScript.Arguments.Named.Exists("ASK") Then strCMD = Chr(34) & strPath & "AutoRunOnce.wsf" & Chr(34) & " /Add:SCTKey " & Chr(34) & strPath & "AutoDemo.wsf" & Chr(34) & " /args:" & Chr(34) & "/ASK " & strStep & " " & strUser & " " & strPassword & Chr(34) Else strCMD = Chr(34) & strPath & "AutoRunOnce.wsf" & Chr(34) & " /Add:SCTKey " & Chr(34) & strPath & "AutoDemo.wsf" & Chr(34) & " /args:" & Chr(34) & strStep & " " & strUser & " " & strPassword & Chr(34) End If WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True If Err.Number = 0 Then AutoRunOnceMe = True If AutoRunOnceMe Then Wscript.Echo L_RunOnceMe_TEXT & strStep Else Wscript.Echo L_RunOnceMeFail_TEXT & strStep WScript.Sleep 5000 End If WSCript.Echo "" End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: SetFinalPassword(strUserMod, strFinalPassword) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Change the initial complex password to the final password. ' *** This is used to make the password blank, if possible ' *** -------------------------------------------------------------------------------- ' *** Sub SetFinalPassword(strUserMod, strFinalPassword) ' ~~~ We need to catch errors in this routine On Error Resume Next Dim oUser Set oUser = GetObject("WinNT://./" & strUserMod & ",user") oUser.SetPassword strFinalPassword oUser.SetInfo If Err.Number = 0 Then WScript.Echo L_FinalPwd_TEXT & strUserMod Else WScript.Echo L_FinalPwdFail_TEXT & strUserMod WScript.Sleep 1000 End If End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: MakeLimitedUser(strUserMod) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Remove an account from the administrators group and add it ' *** to the users group. ' *** -------------------------------------------------------------------------------- ' *** Function MakeLimitedUser(strUserMod) ' ~~~ We need to catch errors in this routine On Error Resume Next MakeLimitedUser = False oGroupAdmins.Remove "WinNT://" & oNetwork.ComputerName & "/" & strUserMod oGroupUsers.Add "WinNT://" & oNetwork.ComputerName & "/" & strUserMod If Err.Number = 0 Then MakeLimitedUser = True If MakeLimitedUser Then Wscript.Echo L_LimitAcct_TEXT & strUserMod Else Wscript.Echo L_LimitAcctFail_TEXT & strUserMod WScript.Sleep 5000 End If End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: AutoLogon(strUserMod, strPasswordMod) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Establish an account to AutoLogon... so AutoDemo can begin ' *** again after a restart or logoff. ' *** -------------------------------------------------------------------------------- ' *** Sub AutoLogon(strUserMod, strPasswordMod) strCMD = "" strCMD = Chr(34) & strPath & "AutoLogon.wsf" & Chr(34) & " /Enable " & strUserMod & " " & strPasswordMod WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True Wscript.Echo L_AutoLogon_TEXT & strUserMod WScript.Echo "" End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: AutoLogonDisable ' *** -------------------------------------------------------------------------------- ' *** Purpose: Turn off AutoLogon ' *** -------------------------------------------------------------------------------- ' *** Sub AutoLogonDisable strCMD = "" strCMD = Chr(34) & strPath & "AutoLogon.wsf" & Chr(34) & " /Disable" WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True Wscript.Echo L_AutoLogonDisabled_TEXT WScript.Echo "" End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: AutoRestart(strUserMod, strPgm) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Cause an application to automtically start and restart ' *** within a specific user profile. ' *** -------------------------------------------------------------------------------- ' *** Sub AutoRestart(strUserMod, strPgm) strCMD = "" strCMD = Chr(34) & strPath & "AutoRestart.wsf" & Chr(34) & " /Enable " & strUserMod & " " & Chr(34) & strPgm & Chr(34) WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True Wscript.Echo L_AutoRestart_TEXT & strUserMod & ", " & strPgm WScript.Echo "" End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: Accessibility(strParms) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Set some accesssibility options within a profile. ' *** -------------------------------------------------------------------------------- ' *** Sub Accessibility(strParms) strCMD = "" strCMD = Chr(34) & strPath & "Accessibility.wsf" & Chr(34) & " " & strParms WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True Wscript.Echo L_Accessibility_TEXT WScript.Echo "" Wscript.Sleep 5000 End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: HKLM(bOn) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Set/unset the security settings from Getting Started Step 2. ' *** -------------------------------------------------------------------------------- ' *** Sub HKLM(bOn) Const WELCOMELOGONKEY = "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LogonType" ' ~~~ WelcomeLogonKey = 0: Classic CAD Mode, 1: Welcome Screen Const WELCOMEOFFCOMPKEY1 = "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ShutdownWithoutLogon" ' ~~~ WelcomeOffCompKEY1 = 0: Disable Turn off Computer, 1: Enable Turn off Computer (default) Const WELCOMEOFFCOMPKEY2 = "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\shutdownwithoutlogon" ' ~~~ WelcomeOffCompKEY2 = 0: Disable Shutdown, 1: Enable Shutdown (default) Const LASTLOGONKEY = "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\dontdisplaylastusername" ' ~~~ LastLogonKEY = 0: Display last username (default), 1: Don't display last username CONST NOLMHASHKEY = "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\NoLMHash" ' ~~~ NoLMHashKEY = 0: LMHash used (default), 1: Don't store passwords using LMHash Const NOACCTCACHEKEY = "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\DisableDomainCreds" ' ~~~ NoAcctCacheKEY = 0: Enable storage (default), 1: Disable storage Const DELROAMINGCACHEKEY = "HKLM\SOFTWARE\Policies\Microsoft\Windows\System\DeleteRoamingCache" ' ~~~ DelRoamingCacheKEY = 0: Do not delete roaming profiles (default), 1: Delete them Const PROFILEERRACTIONKEY = "HKLM\SOFTWARE\Policies\Microsoft\Windows\System\ProfileErrorAction" ' ~~~ ProfileErrActionKEY = 0: Allow logon without roaming profile (default), 1: Don't allow this Dim x, y If bOn Then Wscript.Echo L_GS2On_TEXT x = 1 y = 0 Else Wscript.Echo L_GS2Off_TEXT x = 0 y = 1 End If WScript.Echo "" oShell.RegWrite WELCOMELOGONKEY, x, "REG_DWORD" oShell.RegWrite WELCOMEOFFCOMPKEY1, y, "REG_DWORD" oShell.RegWrite WELCOMEOFFCOMPKEY2, y, "REG_DWORD" oShell.RegWrite LASTLOGONKEY, x, "REG_DWORD" oShell.RegWrite NOLMHASHKEY, x, "REG_DWORD" oShell.RegWrite NOACCTCACHEKEY, x, "REG_DWORD" oShell.RegWrite DELROAMINGCACHEKEY, x, "REG_DWORD" oShell.RegWrite PROFILEERRACTIONKEY, x, "REG_DWORD" strCMD = "" If NOT bOn Then strCMD = Chr(34) & strPath & "Welcome.wsf" & Chr(34) & " /Enable " & strUser Else strCMD = Chr(34) & strPath & "Welcome.wsf" & Chr(34) & " /Disable " & strUser End If WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True If NOT bOn Then Wscript.Echo L_WelcomeList_TEXT Else Wscript.Echo L_WelcomeRemove_TEXT End If WScript.Echo "" End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: RestrictUser(strUserMod, strRestrict) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Restrict and lock a user profile. ' *** -------------------------------------------------------------------------------- ' *** Sub RestrictUser(strUserMod, strRestrict) Wscript.Echo "Restrict user profile: " & strUserMod strCMD = "" strCMD = Chr(34) & strPath & "Restrict.wsf" & Chr(34) & " /apply /user:" & strUserMod & " /xml:" & Chr(34) & strRestrict & Chr(34) WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: WDP(strSetting) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Change Windows Disk Protection ' *** -------------------------------------------------------------------------------- ' *** Sub WDP(strSetting) strCMD = "" Select Case strSetting Case "Init" Wscript.Echo L_WDPInit_TEXT strCMD = Chr(34) & strPath & "DiskProtect.wsf" & Chr(34) Case "On" Wscript.Echo L_WDPOn_TEXT strCMD = Chr(34) & strPath & "DiskProtect.wsf" & Chr(34) & " /On /MU /Time:03" Case "Save" Wscript.Echo L_WDPSave_TEXT strCMD = Chr(34) & strPath & "DiskProtect.wsf" & Chr(34) & " /Save" Case "Off" Wscript.Echo L_WDPOff_TEXT strCMD = Chr(34) & strPath & "DiskProtect.wsf" & Chr(34) & " /Off" Case Else Wscript.Echo L_WDPErr_TEXT WScript.Sleep 5000 Quit End Select WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: SleepWake(strTime) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Start the SleepWake command-line tool ' *** -------------------------------------------------------------------------------- ' *** Sub SleepWake(strTime) strCMD = "" strCMD = Chr(34) & strPath & "SleepWakePC.wsf" & Chr(34) & " /Wake /Sleep:" & strTime & " /User:" & strUser & " /Password:" & strPassword WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True WScript.Echo L_SleepWake_TEXT & strTime WScript.Echo "" End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: DeleteUserProfile(strUser) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Delete a user profile ' *** -------------------------------------------------------------------------------- ' *** Sub DeleteUserProfile(strUser) strCMD = "" strCMD = Chr(34) & strPath & "ProfileMgr.wsf" & Chr(34) & " /Delete " & strUser WScript.Echo strCMD WScript.Echo "" oShell.Run strCMD, 7, True Wscript.Echo L_DeleteUP_TEXT & strUser WScript.Echo "" End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: DeleteUser(strUser) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Delete a user account ' *** -------------------------------------------------------------------------------- ' *** Sub DeleteUser(strUser) ' ~~~ We need to ignore errors in this routine On Error Resume Next Wscript.Echo L_DeleteAcct_TEXT & strUser oAccounts.Delete "user", strUser End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: Logoff ' *** -------------------------------------------------------------------------------- ' *** Purpose: Logoff the current account ' *** -------------------------------------------------------------------------------- ' *** Sub Logoff Wscript.Echo L_LoggingOff_TEXT WScript.Echo "" oShell.Run "Shutdown.exe -l -f -t 05", 7, True End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: Restart(strComment) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Restart the computer with a message ' *** -------------------------------------------------------------------------------- ' *** Sub Restart(strComment) Wscript.Echo L_Restarting_TEXT WScript.Echo "" oShell.Run "Shutdown.exe -r -f -t 05 -c " & Chr(34) & strComment & Chr(34), 7, True End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: GetGroupName(strSID) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Returns the group name for the specified SID ' *** -------------------------------------------------------------------------------- ' *** Function GetGroupName(strSID) Dim colGroups, oGroup Set colGroups = oWMI.ExecQuery("Select * from Win32_Group where SID = '" & strSID & "'") For Each oGroup in colGroups GetGroupName = oGroup.Name Exit For Next Set colGroups = Nothing End Function ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: Quit ' *** -------------------------------------------------------------------------------- ' *** Purpose: Destroy objects and quit the script. ' *** -------------------------------------------------------------------------------- ' *** Sub Quit Set oGroupUsers = Nothing Set oGroupAdmins = Nothing Set oAccounts = Nothing Set oFso = Nothing Set oNetwork = Nothing Set oShell = Nothing Set oWMI = Nothing WScript.Quit End Sub ]]> </script> </job> </package>